Montenegro: technology regulation at a glance

Framework: Law on the Prevention of Money Laundering and Terrorist Financing (amended 28 February 2025); CMA Rulebook on CASP Registration (25 December 2025); overseen by the Capital Market Authority (Komisija za tržište kapitala)

Montenegro adopted its first-ever crypto regulatory framework via AML law amendments on 28 February 2025, establishing a mandatory CASP registration system (not a licensing regime) administered by the Capital Market Authority. Crypto is legal, treated as a digital asset/property rather than legal tender, with KYC/AML obligations for providers and a 9% flat tax on capital gains. A dedicated MiCA-aligned standalone law was in public consultation as of September 2025, with finalization targeted for 2026; until then, significant regulatory gaps remain, particularly for stablecoins, token offerings, DeFi, and enforcement.

Framework: No dedicated AI law in force; National AI Strategy 2026-2030 under active drafting (Ministry of Public Administration, UNDP); Council of Europe Framework Convention on AI signed November 2024; EU AI Act alignment anticipated upon accession

Montenegro has no dedicated AI legislation as of May 2026. The country signed the Council of Europe's Framework Convention on Artificial Intelligence in November 2024 and is actively developing its first National AI Strategy (2026-2030) through a multi-stakeholder Working Group coordinated by the Ministry of Public Administration. AI activity is currently governed only by general principles derived from existing data-protection and information-security laws.

Framework: Law on Personal Data Protection (Official Gazette of Montenegro No. 13/2023, amended No. 77/2024), supervised by the Agency for Personal Data Protection and Free Access to Information (AZLP)

Montenegro enacted a new, GDPR-aligned Personal Data Protection Act on 1 March 2023, which entered into force on 1 July 2023, replacing the earlier 2008/2017 law. The Act was further amended in August 2024 to deepen GDPR alignment, introducing data portability and tightening enforcement. As the most advanced EU accession candidate, with accession-treaty drafting approved by EU ambassadors in April 2026, Montenegro's data protection framework is actively converging with the EU acquis.

Framework: Payment System Law (Law on Payment Transactions), as amended Sept 2022 / in force 8 October 2023, harmonized with EU PSD2; supervised by the Central Bank of Montenegro (CBCG)

Montenegro operates a dedicated, in-force licensing regime for payment institutions and electronic money institutions under the Payment System Law, which the CBCG supervises and which is aligned with the EU PSD2. The CBCG licenses and maintains public registers of payment institutions, e-money institutions and their agents, and the PSD2-based amendments (in force 8 October 2023) introduced open banking (payment initiation and account information services) and strong customer authentication. Montenegro joined the SEPA geographical area in November 2024 and began operational use of SEPA schemes in October 2025, with a TIPS-based 24/7 instant-payments platform planned for 2026.

Framework: Law on Foreigners (Official Gazette of Montenegro nos. 12/18, 3/19, 86/22, introducing the digital-nomad category in Aug 2022) plus the Ministry of Interior 'Rulebook on detailed conditions and method of issuing a residence permit for digital nomads' (Nov 2022) and the Government's 'Programme for Attracting Digital Nomads in Montenegro'. Administered by the Ministry of Interior; official portal digitalnomads.gov.me.

Montenegro operates a dedicated digital-nomad temporary residence permit, in force since amendments to the Law on Foreigners in August 2022 and operationalized by a 2022 Ministry of Interior Rulebook and the government 'Programme for Attracting Digital Nomads'. It is open to non-Montenegrins who work remotely for foreign employers/clients or their own non-Montenegrin company, is issued for up to 2 years and renewable for up to 2 more (4 years total), and carries an income-tax exemption on the foreign-earned income. The former citizenship/golden-visa-by-investment scheme closed at the end of 2022.

Framework: Sectoral regime: Law on Audiovisual Media Services (54/24) and Media Law (54/24), enforced by the Agency for Audiovisual Media Services (AMU); EU Digital Services Act/Digital Markets Act alignment pending as part of accession but not yet transposed.

Montenegro regulates online content through sectoral media legislation rather than a single comprehensive online-safety statute. The June 2024 media package (Media Law and Audiovisual Media Services Law, both 54/24) transposed the EU Audiovisual Media Services Directive (2018/1808), covering video-sharing platforms, introduced hate-speech removal duties, and added sanctions against unregistered online media; horizontal platform rules (DSA/DMA, age verification) are still being aligned for EU accession and are not yet in force.

Framework: Law on Information Security (Zakon o informacionoj bezbjednosti), Official Gazette No. 113/2024, in force December 5, 2024; aligned with EU NIS2 Directive (2022/2555); supervised by the newly established Cybersecurity Agency and CIRT.ME

Montenegro enacted a comprehensive Law on Information Security in November 2024 (in force December 2024), explicitly transposing the EU NIS2 Directive as part of its Chapter 10 EU accession negotiations. The law covers both public and private entities across essential sectors, introduces mandatory incident reporting timelines, and establishes a new Cybersecurity Agency as the central competent authority alongside the existing CIRT.ME for state bodies. A complementary National Cybersecurity Strategy 2022-2026 provides the strategic roadmap.

Framework: Law on Business Companies (new Act in force January 1, 2026), administered by the Central Registry of Business Entities (CRPS) and the Montenegro Investment Agency (MIA)

Montenegro permits 100% foreign ownership in virtually all sectors, with no nationality restrictions on founders or shareholders; foreign investors are legally treated identically to domestic investors. The dominant vehicle is the DOO (LLC), requiring only €1 minimum share capital and achievable in 4-10 business days. A new Companies Act effective 1 January 2026 modernises corporate governance, introduces electronic incorporation, and aligns the framework closer to EU standards.